Jira QA Workflows
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides a TypeScript automation template that retrieves and processes data from external Jira issues.
- Ingestion points: Issue data including
summaryandlabelsare fetched via the Jira REST API inSKILL.mdusingjira.get('/search/jql', ...). - Boundary markers: There are no delimiters or boundary markers used to separate the external bug content from the agent's internal instructions.
- Capability inventory: The script demonstrates capabilities to perform network requests (Jira REST API), read issue data, and modify issue labels via
jira.put. - Sanitization: The script does not perform any sanitization, filtering, or validation of the
issue.fields.summarycontent before it is incorporated into the agent's processing context.
Audit Metadata